nerdexam
EC-Council

312-50V12 · Question #260

In the process of footprinting a target website, an ethical hacker utilized various tools to gather critical information. The hacker encountered a target site where standard web spiders were…

The correct answer is D. User-directed spidering with tools like Burp Suite and WebScarab. The hacker likely used user-directed spidering with proxy tools to map the website by manually browsing, effectively circumventing automated spider restrictions and monitoring real-time traffic.

Submitted by jian89· Mar 4, 2026Reconnaissance Techniques

Question

In the process of footprinting a target website, an ethical hacker utilized various tools to gather critical information. The hacker encountered a target site where standard web spiders were ineffective due to a specific file in its root directory. However, they managed to uncover all the files and web pages on the target site, monitoring the resulting incoming and outgoing traffic while browsing the website manually. What technique did the hacker likely employ to achieve this?

Options

  • AUsing the Netcraft tool to gather website information
  • BExamining HTML source code and cookies
  • CUsing Photon to retrieve archived URLs of the target website from archive.org
  • DUser-directed spidering with tools like Burp Suite and WebScarab

How the community answered

(28 responses)
  • A
    4% (1)
  • C
    4% (1)
  • D
    93% (26)

Why each option

The hacker likely used user-directed spidering with proxy tools to map the website by manually browsing, effectively circumventing automated spider restrictions and monitoring real-time traffic.

AUsing the Netcraft tool to gather website information

Netcraft is primarily an online service for gathering publicly available information about web servers and technologies, not a tool for interactive user-directed spidering or bypassing `robots.txt` through manual browsing and traffic monitoring.

BExamining HTML source code and cookies

Examining HTML source code and cookies is a passive analysis method that provides insights into client-side technologies but does not actively uncover all files and web pages by monitoring live network traffic during manual browsing.

CUsing Photon to retrieve archived URLs of the target website from archive.org

Retrieving archived URLs from archive.org is a technique for historical data reconnaissance and does not involve real-time monitoring of traffic or active discovery of current web pages through manual interaction with the live site.

DUser-directed spidering with tools like Burp Suite and WebScarabCorrect

User-directed spidering, often facilitated by web proxy tools like Burp Suite or WebScarab, allows an ethical hacker to manually navigate a website while the tool intercepts and records all requests and responses. This technique enables the discovery of web pages and files as the user interacts with them, bypassing restrictions like `robots.txt` that block automated spiders, and simultaneously monitors all incoming and outgoing traffic.

Concept tested: User-directed web spidering and traffic analysis

Topics

#footprinting#web spidering#robots.txt bypass#Burp Suite

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice